Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323130303a3a2f34302d3430203d3e20323636343136.roa
File:                     323830343a333737343a323130303a3a2f34302d3430203d3e20323636343136.roa (raw, json)
Hash identifier:          KKh1qbDk+x8oKtcJwa/YLUMaurd6Fu7ssBXYxF31aUU=
Subject key identifier:   E5:E2:2C:CA:0F:2A:8E:E9:D4:72:B7:5D:4A:D7:4C:BB:76:8B:C4:41
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       5BB8EA4D4619DB57EBCAADACDA7BF22849AFE21E
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323130303a3a2f34302d3430203d3e20323636343136.roa
Signing time:             Sun 26 May 2024 20:57:19 +0000
ROA not before:           Sun 26 May 2024 20:52:19 +0000
ROA not after:            Sun 25 May 2025 20:57:19 +0000
asID:                     266416
IP address blocks:        2804:3774:2100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b8:ea:4d:46:19:db:57:eb:ca:ad:ac:da:7b:f2:28:49:af:e2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 26 20:52:19 2024 GMT
            Not After : May 25 20:57:19 2025 GMT
        Subject: CN=E5E22CCA0F2A8EE9D472B75D4AD74CBB768BC441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:81:0e:4f:87:d0:95:ab:ce:67:06:36:9a:
                    aa:58:02:f3:6a:cd:d5:8b:c4:00:16:bb:04:19:7b:
                    a1:78:e2:b7:8e:34:c2:6a:33:5e:68:fd:04:6f:ea:
                    67:05:fb:f8:df:45:7a:df:15:8b:5a:2c:7d:55:88:
                    14:f3:be:14:31:0f:6e:20:77:c5:ec:7f:7f:ad:ba:
                    36:71:6f:0e:96:98:f5:12:15:be:4c:39:23:04:95:
                    92:3b:8d:6d:52:92:f7:e9:35:31:e7:ce:ec:11:46:
                    30:c1:66:85:b7:d5:98:13:7e:fa:f7:84:a5:d2:c4:
                    c5:be:66:4c:a5:2f:63:ba:d9:f1:c4:73:ae:43:e7:
                    e7:08:03:d1:4b:ac:e6:f7:d8:52:41:3b:57:11:a4:
                    02:d6:91:1a:84:05:a8:77:42:a8:66:b9:00:a1:00:
                    6c:f2:1a:64:4c:14:8b:21:f8:00:67:82:b0:fc:cc:
                    2b:ce:53:b4:dd:8c:be:b0:62:86:47:3d:56:ee:5e:
                    f5:d0:62:7e:ac:b1:47:1e:3f:11:48:68:f6:78:e0:
                    14:c7:69:3a:36:f0:0a:39:dd:cd:12:4e:26:3c:19:
                    f0:8e:5a:f4:a2:84:7d:de:82:78:42:60:ba:c7:82:
                    c0:60:73:0b:c0:03:57:b9:c3:bd:9d:14:99:1a:84:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:2C:CA:0F:2A:8E:E9:D4:72:B7:5D:4A:D7:4C:BB:76:8B:C4:41
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/323830343a333737343a323130303a3a2f34302d3430203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3774:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:7d:a3:90:bd:fb:84:37:64:25:5f:9c:a5:d5:70:39:d4:
         56:9d:09:32:dc:bd:09:4e:25:4a:d4:29:61:21:12:15:8f:57:
         b0:47:0b:0d:d5:25:74:ea:ef:da:74:b7:b9:c1:fc:b1:96:75:
         c1:36:74:15:3a:33:1e:01:91:eb:1a:6b:64:86:fd:4b:bd:38:
         62:fa:fe:91:a5:03:b1:7d:d1:68:1c:2b:ed:96:29:35:cb:c5:
         26:6f:a1:58:ad:84:a9:b6:36:9a:c7:a1:6b:3f:99:56:47:25:
         bd:0f:8e:f9:3d:52:b1:55:87:7d:7c:68:74:83:05:db:98:11:
         79:f5:11:34:01:26:43:f9:92:41:08:b7:7a:72:d4:f0:e7:ec:
         82:c3:1f:be:ad:8e:1e:c9:72:0a:65:60:81:c1:96:48:a1:c2:
         c3:55:10:10:71:f4:f5:f0:82:43:04:db:9d:2e:b5:5c:e3:1a:
         a9:f8:9e:df:93:35:fc:0c:d3:16:82:e5:94:f9:dd:3f:5c:7e:
         1b:11:60:a3:b1:63:01:22:b2:2b:87:b7:a8:de:6f:31:49:41:
         a7:62:09:43:57:07:79:90:ac:ce:ef:85:c5:bd:74:ec:b5:62:
         48:1b:5e:c3:89:cb:29:0b:ef:a7:9d:9c:41:92:5f:8a:f8:48:
         76:97:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org